Book Carpet Cleaning

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Note

ASI02: Tool Misuse and Exploitation

What this means

The agent could book an appointment with a service provider if the user proceeds with this skill.

Why it was flagged

The skill documents a tool call that can create an external service booking, which is expected for the stated purpose but should be performed only after the user confirms the booking details.

Skill content

"name": "create_booking", "arguments": { "providerId": "xxx", "serviceId": "yyy", "timeSlot": "2025-02-10T14:00:00-08:00"

Recommendation

Confirm the provider, service, time slot, and any costs or cancellation terms before allowing the booking call.

Note

ASI07: Insecure Inter-Agent Communication

What this means

Your name, email, phone number, and booking request details may be transmitted to Lokuli and/or a service provider.

Why it was flagged

The skill uses a disclosed external MCP endpoint and includes customer contact details in the booking request, meaning personal information is sent outside the local agent environment.

Skill content

https://lokuli.com/mcp/sse ... "customerName": "John Doe", "customerEmail": "john@example.com", "customerPhone": "+13105551234"

Recommendation

Use the skill only if you are comfortable sharing the needed contact information with the external booking service.